https://blog.offline-net.com/2015/04/19/security-measure-openssl-ssl-tls/